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WHAT IS CLAIMED IS: 
An extended key generator comprising: 
a plurality of cascade-connected key transform 
function sections for receiving different keys in units 
of rounds, and generating extended keys on the basis of 
the input ke^s, 

each of said key transform function sections 
comprising 

first key transform means for executing a 
10 transform proces sousing a predetermined substitution 



table on the basis 
input key; and 

extended key 
extended key on th& 



of a^flrst key obtained from the 



computation means for computing the 
, basis\ of a transformed result of 

I \ 

15 said first key transform means , and a second key 

obtained from the input key. 

2. A generator according to claim 1, wherein each 
of said key transform function sections comprises: 

rotate-shift means f or\rotate-shif ting the input 
20 key to the left or right, anc^inputting the 

rotate-shifted key to the key transform function 
section of the next round. 

3. A generator according to^claim 2, wherein a 
shift amount of said rotate-shift means is relatively 

\ 

25 prime to the number of output bits of said first key 

transform means. 

4. A generator according to claim 1, wherein each 
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\ 

\ 

of sai\d key transform function sections comprises: 

\ 

input key transform means for transforming the 
input key^using a substitution table, and inputting the 
transformed key to the key transform function section 



v 



of the next Vound. 

5, A generator according to claim 1, wherein each 
of said key transform function sections comprises: 

extended transform means for extending and 
transforming a transformed result of said first key 
10 transform means, a:id/ inputting the extended transformed 

result to said ext^rjdpcf £ey computation means. 



Ifj 6 • A generat 



if. 



^according to claim 5, wherein the 



extended transformation of said extended transform 

y 

means is implemented by\shifting a predetermined number 
15 of bits, 

7. A generator according to claim 6, wherein the 
shift of the predetermined number of bits is 
implemented by shifting the transformed result to the 
left by the number of bits half^the number of bits of 

2 0 the transformed result of said f^irst key transform 

\ 

means, or the number of bits obtained by adding an 
integer multiple of the number of tits of the 
transformed results to the half number of bits. 

8. A generator according to claim 1, wherein a 
2 5 computation of said extended key computation means is 

addition with carry-up. 

9. An encryption/decryption unit comprising an 
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extended^ey generator of claim 1, comprising: 

a data\ randomization part for encrypting input 
plaintext on\the basis of the extended keys generated 
by said key transform function sections and outputting 
5 ciphertext, and\ decrypting input ciphertext and 

outputting plaintext . 

10. A unit according to claim 9, wherein said data 

\ 

randomization part Vhas a plurality of substitution 
tables for encryption and decryption, and 
10 some substitution y £iifoles^of said data 

randomization part arey coirfmon to the substitution 

v \ 

tables of said first k&y transform means . 

1^T~ An extended k!oy\generation method , comprising 
the steps of : \ x 

15 inputting different kejrs in units of rounds; 

generating a first key fsrom the inputted key; 
transforming the generated first key by using a 
predetermined substitution tabl^; and 

computing an extended key on^the basis of the 
2 0 transformed result and a second key v obtained from the 

inputted key . 

A computer readable storage medium which 
stores a program for making a computer: 

generate a first key from dif f erent \keys inputted 
25 in units of rounds; \ 

transform the generated first key by using a 
predetermined substitution table; and \ 
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confute an extended key on the basis of the 

\ 

transformed result and a second key obtained from the 



inputted key. 

13. A Medium according to claim 12, in which 

5 stores a program for making the computer rotate-shift 

the inputted key to the left or right, and input the 
rotate-shifted Key to the next round. 

v 

14. A medium according to claim 13, wherein 

\ 

a shift amount of Vthe rotate-shift function is 
10 relatively prime to the number of output bits of 

\ A 

the first key transform. 

15. A medium accA^rding to claim 14, in which 
stores a program forf making^ the computer transform the 
inputted key using q substitution table, and input the 

15 transformed key to the next round. 

\ 

16. A medium according to claim 12, in which 
stores a program for making\the computer extend and 
transform the transformed result based on the first 
key . 

20 17. A medium according to claim 12, wherein the 

\ 

extended transform function is implemented by shifting 
a predetermined number of bits . 

18. A medium according to claim 17, wherein 
the shift of the predetermined number\^°f bits is 
25 implemented by shifting the transf ormed^result to the 

left by the number of bits half the number of bits of 
the transformed result of said first key transform 
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\ 

means, or^the number of bits obtained by adding 
an integer\multiple of the number of bits of the 
transformed ^results to the half number of bits. 

19. A medium according to claim 12, wherein the 



computation of \the extended key is addition with 
carry-up . 

A computer readable storage medium which 
^orf making a computer: 
.A>r1 




stores a program fof 
generate a fir 



^t/kqjy from different keys inputted 

10 in units of rounds; 

transform the^gei^eratbd first key by using 
a predetermined substitution^ table ; 

compute an extended\^key on the basis of the 
transformed result and a s v econd key obtained from the 
15 inputted key; and 

execute data randomization for encrypting inputted 
plaintext on the basis of the\ generated extended keys 
and outputting ciphertext, andViecrypting inputted 
ciphertext and outputting plain-text. 
20 21. A medium according to claim 20, wherein the 

data randomization has a plurality of substitution 
tables for encryption and decryption \ and 

some substitution tables of the data randomization 
are common to the substitution tables used in 
25 transformation based on the first key, 

2^. An extended key generator comprising: 
a plurality of cascade-connected key transform 
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\ 

function sections for receiving different keys in units 

of rounds^ and generating extended keys on the basis of 

\ 

the inputted keys, 

each of\said key transform function sections 
5 comprising: 

a plurality of extended transform elements that 
form a parallel circuit, each of said extended 
transform elements^including: 

a constant register for holding a constant, 
10 XOR computatiorvyme^ans for computing an XOR of the 

constant held in sai'dXconstant register, and a first 
key obtained f rom fthe inputted key, 

/ \ \ 

an S box for /executing a transform process using 
a predetermined substitution table on the basis of 
15 a value outputted from said XOR computation means, and 

an extended transformer for extending and 
transforming a transformed result outputted from said S 
box; and 

extended key computation means for computing 
20 extended keys on the basis of the\^transf ormed results 

outputted from said plurality of expended transform 
elements, and a second key obtained from the inputted 
key . 

A computer readable storage medium which is 
25 used in an extended key generator having a plurality 

of cascade-connected key transform functiom sections 
for receiving different keys in units of rounds, 
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\ 

and generating extended keys on the basis of 

\ 

the inputted keys, 

sa^d medium storing a program for making 
e^ in saic 

as each of the key transform function sections, 



a computed in said extended key generator implement: 



a plurality of extended transform elements which 
form a parallel circuit, each extended transform 
elements including : 

a constant register for holding a constant, 
10 XOR computation means for computing an XOR of the 



^ constant held in\ said\ constant register, and a first 

t Y / \ , 

Ui key obtained froiq\t he ^inputted key, 

an S box f or J&xecuting a transform process using 

tA \ . 

a predetermined substitution table on the basis of 

v \ \ 

15 a value outputted from said XOR computation means, and 

an extended transformer for extending and 

\ 

transforming a transformed result outputted from said S 
box; and 

extended key computation means for computing 
20 extended keys on the basis\)f the transformed results 

\ 

outputted from said plurality, of extended transform 
elements, and a second key obtained from the inputted 



key. 



An extended key generator comprising: 
25 a plurality of cascade-connected key transform 

function sections for receiving different keys in units 
of rounds, and generating extended keys on the basis of 
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the inputted keys, 

e^ch of said key transform function sections 
comprisamg: 

a substitution part for nonlinearly substituting 
5 the inputted key, and outputting the substituted 

result; 

first k x ey transform means for executing a 
transform process using a predetermined substitution 
table on the basis of a first key outputted from said 
10 substitution part; and 

\ 

extended key commutation means for computing the 
extended key on the bksis of a transformed result of 

\ / 

said first key transform means, and a second key 
outputted from said/Asubstitution part. 




generation method, comprising 



15 An extends 

the steps of: 

inputting different keys in units of rounds; 
nonlinearly substituting the inputted key; 
transforming a firs^ykey obtained from the 
20 substitution by using a predetermined substitution 

table; and 

computing an extended key on the basis of 
a transformed result, and a second key obtained from 
the substitution, 
25 2^ A computer readable storage medium which 

stores a program for making a computer: 

generate a first key from different keys inputted 
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in units o\ rounds; 




nonlineai\^y substitute the inputted key; 
transform a^ecotfd key\ obtained from the 

/ V 

substitution by usin^ a ,pj?etfetermined substitution 
table; and 

compute an extended key^on the basis of a 
transformed result, and a second^ key obtained from the 
substitution . 



